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CLAIMS: 



1 . Digital rights management (DRM) user unit for interacting with DRM client 
units (3) and DRM server units (1) of a DRM system, said DRM client units (3) storing 
digital data objects (DDO) and said DRM server units (1) issuing digital rights objects (DRO) 
representing usage rights of associated digital data objects, comprising: 

5 - an authentication xmit (2 1) for authentication of the DRM user unit (2) to a 

DRM server unit (1) and for authentication of a DRM client unit (1) to the DRM user unit 
(2), and 

a rights storage unit (22) for storing digital rights objects received from a DRM server 
unit (1), wherein said digital rights objects can be accessed by an authenticated DRM client 
10 unit (3) to get usage rights for the usage of an associated digital data object stored on said 
DRM client unit (3). 

2. DRM user unit as claimed in claim 1 , 
further comprising: 

a rights interface tmit (24) for receiving digital rights objects from a DRM 
1 5 server unit (1) to which the DRM user unit (2) has authenticated and for granting usage rights 
for the use of a digital data object stored on an authenticated DRM client unit (3) and 
associated with a digital rights object stored in said rights storage unit (23). 

3. DRM user unit as claimed in claim 1, 
fiirther comprising: 

20 - a revocation list storage unit (22) for storing a revocation list of DRM cUent 

units (3), said revocation list being checked by said authentication unit (21) during 
authentication of a DRM client unit (3). 

4. DRM user imit as claimed in claim 1 , 

wherein said DRM user unit (2) is a portable electronic device, in particular a smart card, a 
25 PCMCIA card or a mobile terminal, such as a mobile audio and/or video player, a mobile 
phone or a PDA. 

5. DRM user imit as claimed in claim 1, 

wherein said digital rights objects include an access information which DRM client units (3) 
shall get access to a digital rights objects, said access information being checked by the DRM 
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user unit (2) after authentication of a DRM client (3 1) requesting access to said digital rights 
object 

6. DRM user unit as claimed in claim 1, 
further comprising: 

a portable memory unit for storing at least part of the digital rights objects or a 
copy of the digital rights objects stored in said rights storage unit (23), the presence of said 
portable memory unit being checked before an access to digital rights objects is granted. 

7. DRM user unit as claimed in claim 1, 

wherein said digital rights objects include an transfer indicator indicating if a digital rights 
object is transferable to all DRM client units (3) or not, and 

wherein said authentication imit is adapted for authenticating the DRM client unit (3) 
requesting access to a non-transferable digital rights object to the DRM server imit (1). 

8. Digital rights management (DRM) client unit for use in a DRM system, said 
DRM system comprising DRM server units (1) issuing digital rights objects (DRO) 
representing usage rights of associated digital data objects (DDO) and DRM user units (2) for 
interacting with said DRM client units (3) and said DRM server imits (1), comprising: ■ 

a data storage unit (32) for storing digital data objects, 

an authentication unit (31) for authentication ofthe DRM client unit (3) to a DRM • 
user unit (2), and 

a rights interface (33) for requesting access to a digital rights object associated 
with a digital data object stored in said data storage unit after audientication to a DRM user : 
unit to get usage rights for the usage of said associated digital data object. 

9. Digital rights management (DRM) system comprising: 
DRM client units (3) for storing digital data objects (DDO), 

DRM server units (1) for issuing digital rights objects (DRO) representing 
usage rights of associated digital data objects, and 

DRM user imits (2) for interacting with said DRM client xmits (3) and said 
DRM server units (1) comprising: 

an authentication unit (2 1) for authentication of the DRM user unit (2) to a 
DRM server unit and for authentication of a DRM client unit (3) to the DRM user imit (2), 
and 

a rights storage unit (22) for storing digital rights objects received from a 
DRM server imit (1), wherein said digital rights objects can be accessed by an authenticated 
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DRM client unit (3) to get usage rights for the usage of an associated digital data object 
stored on said DRM client unit (3). 

10. Digital rights management CDRM) method for iise in a DRM system, said 

DRM ^stem comprising DRM client units (3) for storing digital data objects (DDO), DRM 
5 server units (1) for issuing digital rights objects (DRO) representing usage rights of 

associated digital data objects and DRM user units (2) for interacting with said DRM client 
units (3) and said DRM server imits (1), said method comprising the steps of: 
authentication of a DRM user unit (2) to a DRM server unit (1), 
transfer of a requested digital rights object from said DRM server unit (1) to 
10 said DRM user imit (2) after successful authentication, 

authentication of a DRM client unit (3) to said DRM user unit (2), and 
transfer of usage rights from said DRM user unit (2) to said DRM client unit 
(3) after successfiil authentication for the usage of an associated digital data object stored on 
said DRM client unit (3). 



